Security Operations: Page

Why is SecOps becoming both easier and more difficult?

While SecOps has become easier in some ways, enterprises still struggle with areas such as data volumes, threat intelligence analysis and security alert volume and complexity.

By Jon Oltsik • Aug. 28, 2024

Infosec industry calls for more public sector collaboration

As cyberattacks continue to rise, infosec professionals address the need to increase private and public sector partnerships to assist law enforcement operations.

By Arielle Waldman • Aug. 27, 2024

Risk & Repeat: National Public Data breach questions remain

The breach of National Public Data may have put billions of personal records at risk, but the scope of the attack and impact on consumers are still unclear.

By Alexander Culafi • Aug. 26, 2024

Security teams need to prioritize DSPM, review use cases

New research showed data resilience is a top priority for security teams, as data security posture management grows to help manage and protect data and improve GenAI.

By Todd Thiemann • Aug. 23, 2024

GuidePoint talks ransomware negotiations, payment bans

GuidePoint Security's Mark Lance discusses the current ransomware landscape and the steps that go into negotiating potential payments with cybercriminal gangs.

By Arielle Waldman • Aug. 22, 2024

What is cloud detection and response (CDR)?

Cloud computing requires a security approach that is different than traditional protections. Where does cloud detection and response fit into a cybersecurity strategy?

By Michael Levan • Aug. 20, 2024

Guide to data detection and response (DDR)

Data is one of the most important assets in any organization. To truly protect it, you need a DDR strategy. Here's what you need to know, with tips on buying DDR tools.

By Sean Kerner • Aug. 19, 2024

How to select an MDR security service

With the threat landscape as challenging as it is, organizations are looking for reinforcements. One option is to bolster detection and response via third-party MDR services.

By Sean Kerner • Aug. 15, 2024

GitHub Copilot Autofix tackles vulnerabilities with AI

GitHub says Copilot Autofix drastically reduced the median time to remediate vulnerabilities in beta testing from 90 minutes for manual fixes to 28 minutes with the GenAI tool.

By Rob Wright • Aug. 14, 2024

EDR testing: How to validate EDR tools

Cutting through an EDR tool's marketing hype is difficult. Ask vendors questions, and conduct testing before buying a tool to determine if it solves your organization's pain points.

By Rob Shapland • Aug. 12, 2024

Veracode highlights security risks of GenAI coding tools

At Black Hat USA 2024, Veracode's Chris Wysopal warned of the downstream effects of how generative AI tools are helping developers write code faster.

By Arielle Waldman • Aug. 7, 2024

What is cyber attribution?

Cyber attribution is the process of tracking and identifying the perpetrator of a cyberattack or other cyber operation.

By Robert Sheldon • July 31, 2024

Be prepared for breach disclosure and a magnitude assessment

Organizations need to take a proactive approach to monitoring data stores continuously, and in the case of a breach, assess the magnitude quickly and accurately. DSPM can help you.

By Todd Thiemann • July 30, 2024

BitLocker workaround may offer aid for CrowdStrike customers

CrowdStrike customers grappling with blue screens of death from the recent IT outage may be able to sidestep BitLocker encryption schemes and recover their Windows systems.

By Rob Wright • July 26, 2024

What is malware? Prevention, detection and how attacks work

Malware, or malicious software, is any program or file that's intentionally harmful to a computer, network or server.

By Kinza Yasar , Ben Lutkevich • July 26, 2024

The differences between open XDR vs. native XDR

Extended detection and response tools are open or native. Learn the differences between them, and get help choosing the right XDR type for your organization.

By Kyle Johnson • July 25, 2024

Types of MDR security services: MEDR vs. MNDR vs. MXDR

Considering MDR security services? There's more than one option available; learn how to find the best for your organization's security needs.

By Diana Kelley • July 24, 2024

Risk & Repeat: Faulty CrowdStrike update causes global outage

Friday's outage, which was caused by a defective CrowdStrike channel file update, resulted in significant disruptions for airlines, critical infrastructure and more.

By Alexander Culafi • July 23, 2024

Intro: How to use BlackArch Linux for pen testing

BlackArch Linux offers a lot of pen testing and security benefits, but it requires knowledgeable and independent professionals who can put the distribution to work.

By Damon Garn • July 23, 2024

Cloud detection and response: CDR vs. EDR vs. NDR vs. XDR

Cloud detection and response is the latest detection and response tool. Explore how it differs from endpoint, network and extended detection and response tools.

By Dave Shackleford • July 22, 2024

8 cloud detection and response use cases

Unsure whether cloud detection and response is useful for your organization? These eight use cases could make CDR indispensable.

By Dave Shackleford • July 22, 2024

How to use Pwnbox, the cloud-based VM for security testing

Pwnbox offers users the chance to hone their skills about security concepts and tools without having to build a costly lab environment.

By Damon Garn • July 18, 2024

Risk & Repeat: AT&T’s Snowflake database breached

AT&T disclosed a breach in which threat actors compromised the company's Snowflake instance and stole call and text records from 'nearly all' the company's cellular customers.

By Alexander Culafi • July 16, 2024

What a cybersecurity analyst does and how to become one

Security analysts play a critical role in defending organizations' sensitive information from cyberattacks. Learn more about the position and how to pursue it.

By Andrew Froehlich • July 16, 2024

What is an intrusion detection system (IDS)?

An intrusion detection system monitors (IDS) network traffic for suspicious activity and sends alerts when such activity is discovered.

By Ben Lutkevich, Cameron Hashemi-Pour • July 15, 2024